ПОЛЬЗОВАТЕЛЯМ

Закрыть

Поиск

Поиск

Поддержка
Круглосуточная поддержка

Напишите

Запрос через форму

Позвоните

Бесплатно по России:
8-800-333-79-32

ЧаВо | Форум

Напишите

Задать вопрос в поддержку

Ваши запросы

  • Все: -
  • Незакрытые: -
  • Последний: -

Позвоните

Бесплатно по России:
8-800-333-79-32

Свяжитесь с нами Незакрытые запросы: 

Профиль

Профиль

RU
RU CN DE EN ES FR IT JP KZ UZ PL BY
Закрыть

Переключение языка сайта

Сервисы
Сканеры
FixIt!
Dr.Web vxCube
Экспертиза ВКИ
Вирусная библиотека
База знаний

Технологии

Термины

Обучение и просвещение

Мифы

Новости

Trojan.MulDrop7.53483

Добавлен в вирусную базу Dr.Web: 2017-12-12

Описание добавлено:

Техническая информация

Для обеспечения автозапуска и распространения:
Модифицирует следующие ключи реестра:
  • [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '跨平台網頁元件' = '"%ProgramFiles%\HiPKILocalSignServer\CheckServer.exe" /start'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '{0c9c6593-b11c-4b1c-a621-aeaa1f0220ea}' = '"%ALLUSERSPROFILE%\Application Data\Package Cache\{0c9c6593-b11c-4b1c-a621-aeaa1f0220ea}\HiCOS...
Создает следующие сервисы:
  • [<HKLM>\SYSTEM\ControlSet001\Services\SCardSvr] 'Start' = '00000002'
Вредоносные функции:
Запускает на исполнение:
  • '<SYSTEM32>\taskkill.exe' /f /im CheckServer.exe
  • '<SYSTEM32>\taskkill.exe' /f /im chtnode.exe
Изменения в файловой системе:
Создает следующие файлы:
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\node_modules\stack-trace\is-EDC3C.tmp
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\node_modules\stack-trace\is-U3FT0.tmp
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\node_modules\pkginfo\test\is-NCL2N.tmp
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\node_modules\stack-trace\is-R0SM9.tmp
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\node_modules\stack-trace\lib\is-S56V0.tmp
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\test\is-VBTA5.tmp
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\node_modules\stack-trace\is-98SMF.tmp
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\node_modules\stack-trace\is-NN5K0.tmp
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\node_modules\pkginfo\examples\is-QF7OJ.tmp
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\node_modules\pkginfo\examples\is-6UBH5.tmp
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\node_modules\pkginfo\examples\is-K28B3.tmp
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\node_modules\pkginfo\examples\is-JU2Q4.tmp
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\node_modules\pkginfo\examples\subdir\is-FH0QQ.tmp
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\node_modules\pkginfo\lib\is-R22V8.tmp
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\node_modules\pkginfo\examples\is-FGTD6.tmp
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\node_modules\pkginfo\examples\is-1PPVI.tmp
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\test\is-510FR.tmp
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\test\is-7NH7D.tmp
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\test\is-ORKUD.tmp
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\test\is-93UCP.tmp
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\test\fixtures\scripts\is-LL6EG.tmp
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\test\fixtures\scripts\is-JOU34.tmp
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\test\is-RIC6F.tmp
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\test\fixtures\scripts\is-LGEVK.tmp
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\test\is-HTNEE.tmp
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\test\is-FE1AE.tmp
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\test\is-OC375.tmp
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\test\is-HJNIG.tmp
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\test\is-OOI6F.tmp
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\test\is-GUR5J.tmp
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\test\is-DFF7I.tmp
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\test\is-PVBFG.tmp
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\node_modules\cycle\is-SFNU5.tmp
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\node_modules\eyes\is-NNCAU.tmp
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\node_modules\cycle\is-22QL2.tmp
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\node_modules\cycle\is-E1BQ1.tmp
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\node_modules\eyes\is-THU65.tmp
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\node_modules\eyes\lib\is-NBULV.tmp
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\node_modules\eyes\is-ISH46.tmp
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\node_modules\eyes\is-5IB0L.tmp
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\node_modules\colors\lib\maps\is-RVKOK.tmp
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\node_modules\colors\lib\system\is-S5LPB.tmp
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\node_modules\colors\lib\maps\is-NK5KM.tmp
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\node_modules\colors\lib\maps\is-68GI4.tmp
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\node_modules\colors\tests\is-D3FJ7.tmp
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\node_modules\colors\themes\is-SO21A.tmp
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\node_modules\colors\screenshots\is-F7UU5.tmp
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\node_modules\colors\tests\is-2H8SF.tmp
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\node_modules\pkginfo\is-HETO4.tmp
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\node_modules\pkginfo\is-G2KOR.tmp
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\node_modules\isstream\is-HAKQ9.tmp
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\node_modules\pkginfo\is-SQ101.tmp
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\node_modules\pkginfo\docs\is-0O63U.tmp
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\node_modules\pkginfo\examples\is-POBMU.tmp
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\node_modules\pkginfo\is-HDK5M.tmp
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\node_modules\pkginfo\docs\is-AVMK6.tmp
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\node_modules\isstream\is-9EBC0.tmp
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\node_modules\isstream\is-F3U64.tmp
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\node_modules\eyes\test\is-QMCA8.tmp
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\node_modules\isstream\is-R1GA0.tmp
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\node_modules\isstream\is-JG74D.tmp
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\node_modules\isstream\is-84935.tmp
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\node_modules\isstream\is-VITQ1.tmp
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\node_modules\isstream\is-T6BJT.tmp
  • %ProgramFiles%\HiPKILocalSignServer\is-4VJI0.tmp
  • %ProgramFiles%\HiPKILocalSignServer\is-DDPDO.tmp
  • %ProgramFiles%\HiPKILocalSignServer\is-K18SP.tmp
  • %ProgramFiles%\HiPKILocalSignServer\is-75TC4.tmp
  • %ProgramFiles%\HiPKILocalSignServer\is-AS17V.tmp
  • %ProgramFiles%\HiPKILocalSignServer\is-PLN6G.tmp
  • %ProgramFiles%\HiPKILocalSignServer\is-HVHFL.tmp
  • %ProgramFiles%\HiPKILocalSignServer\is-IDNDG.tmp
  • %ProgramFiles%\HiPKILocalSignServer\is-N9127.tmp
  • %ProgramFiles%\HiPKILocalSignServer\is-I0TOQ.tmp
  • %ProgramFiles%\HiPKILocalSignServer\is-MO17G.tmp
  • %ProgramFiles%\HiPKILocalSignServer\is-BEOBO.tmp
  • %ProgramFiles%\HiPKILocalSignServer\is-TLH51.tmp
  • %ProgramFiles%\HiPKILocalSignServer\is-TH2HP.tmp
  • %ProgramFiles%\HiPKILocalSignServer\is-HDB90.tmp
  • %ProgramFiles%\HiPKILocalSignServer\is-VRCM4.tmp
  • %ALLUSERSPROFILE%\Start Menu\Programs\跨平台網頁元件\IC卡元件自我檢測.url
  • %ALLUSERSPROFILE%\Start Menu\Programs\跨平台網頁元件\啟動元件服務.lnk
  • %ProgramFiles%\HiPKILocalSignServer\is-78SE9.tmp
  • %ProgramFiles%\HiPKILocalSignServer\is-K2QFH.tmp
  • %ALLUSERSPROFILE%\Start Menu\Programs\跨平台網頁元件\進行元件偵錯.lnk
  • %ProgramFiles%\HiPKILocalSignServer\unins000.dat
  • %ALLUSERSPROFILE%\Start Menu\Programs\跨平台網頁元件\停止元件服務.lnk
  • %ALLUSERSPROFILE%\Start Menu\Programs\跨平台網頁元件\解除安裝元件.lnk
  • %ProgramFiles%\HiPKILocalSignServer\is-1LAPK.tmp
  • %ProgramFiles%\HiPKILocalSignServer\is-D86PO.tmp
  • %ProgramFiles%\HiPKILocalSignServer\is-DJ52C.tmp
  • %ProgramFiles%\HiPKILocalSignServer\is-Q2IU1.tmp
  • %ProgramFiles%\HiPKILocalSignServer\is-COEDN.tmp
  • %ProgramFiles%\HiPKILocalSignServer\is-A4N99.tmp
  • %ProgramFiles%\HiPKILocalSignServer\is-2EI9L.tmp
  • %ProgramFiles%\HiPKILocalSignServer\is-NDH5F.tmp
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\test\transports\is-3B45O.tmp
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\test\transports\is-56BOC.tmp
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\test\transports\is-D4ODI.tmp
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\test\transports\is-HLC82.tmp
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\test\transports\is-PBRH2.tmp
  • %ProgramFiles%\HiPKILocalSignServer\CardManagement\is-N55S0.tmp
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\test\transports\is-FT9CQ.tmp
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\test\transports\is-FOS7A.tmp
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\test\stress\is-EP4P6.tmp
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\test\transports\is-HRNJM.tmp
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\test\fixtures\scripts\is-DQ7TI.tmp
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\test\fixtures\scripts\is-S531U.tmp
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\test\transports\is-MNDTC.tmp
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\test\transports\is-LI5JH.tmp
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\test\transports\is-JEGND.tmp
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\test\transports\is-4GT66.tmp
  • %ProgramFiles%\HiPKILocalSignServer\digits\is-RH648.tmp
  • %ProgramFiles%\HiPKILocalSignServer\digits\is-MPHSU.tmp
  • %ProgramFiles%\HiPKILocalSignServer\digits\is-QOHCI.tmp
  • %ProgramFiles%\HiPKILocalSignServer\digits\is-DCKEV.tmp
  • %ProgramFiles%\HiPKILocalSignServer\is-MBBUS.tmp
  • %ProgramFiles%\HiPKILocalSignServer\is-JGUD4.tmp
  • %ProgramFiles%\HiPKILocalSignServer\digits\is-BHLVK.tmp
  • %ProgramFiles%\HiPKILocalSignServer\digits\is-M10H9.tmp
  • %ProgramFiles%\HiPKILocalSignServer\CardManagement\is-LLFI3.tmp
  • %ProgramFiles%\HiPKILocalSignServer\CardManagement\is-M4LS4.tmp
  • %ProgramFiles%\HiPKILocalSignServer\CardManagement\is-TA6LT.tmp
  • %ProgramFiles%\HiPKILocalSignServer\CardManagement\is-MEK7N.tmp
  • %ProgramFiles%\HiPKILocalSignServer\digits\is-KCPFI.tmp
  • %ProgramFiles%\HiPKILocalSignServer\digits\is-QRHQH.tmp
  • %ProgramFiles%\HiPKILocalSignServer\digits\is-6FHTI.tmp
  • %ProgramFiles%\HiPKILocalSignServer\digits\is-TNKH1.tmp
  • %TEMP%\{9D8667EB-E8E7-471C-B97F-D5AADF86E513}\HiPKILocalSignServer.exe
  • %WINDIR%\Installer\49f2a.msi
  • %TEMP%\{9D8667EB-E8E7-471C-B97F-D5AADF86E513}\HiCOS_Client_x86.msi
  • C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP16\snapshot\Repository\FS\OBJECTS.MAP
  • C:\Config.Msi\49f2d.rbs
  • %ProgramFiles%\Chunghwa Telecom\HiCOS PKI Smart Card\BfiveUcs.dll
  • %WINDIR%\Installer\49f2c.ipi
  • %WINDIR%\Installer\MSI1.tmp
  • %ALLUSERSPROFILE%\Application Data\Package Cache\{0c9c6593-b11c-4b1c-a621-aeaa1f0220ea}\state.rsm
  • C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP16\snapshot\Repository\FS\INDEX.MAP
  • %ALLUSERSPROFILE%\Application Data\Package Cache\{0c9c6593-b11c-4b1c-a621-aeaa1f0220ea}\HiCOS_Client.exe
  • C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP16\snapshot\Repository\FS\INDEX.BTR
  • C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP16\snapshot\Repository\FS\MAPPING2.MAP
  • C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP16\snapshot\Repository\FS\OBJECTS.DATA
  • C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP16\snapshot\Repository\FS\MAPPING.VER
  • C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP16\snapshot\Repository\FS\MAPPING1.MAP
  • <SYSTEM32>\selectcardv2.dll
  • <SYSTEM32>\starp15v2.dll
  • <SYSTEM32>\HiCOSPKCS11.dll
  • <SYSTEM32>\MSVCRTD.dll
  • <SYSTEM32>\UCSBFive.dll
  • %ALLUSERSPROFILE%\Start Menu\Programs\HiCOS PKI Smart Card\HiCOS Token Utility.lnk
  • %ProgramFiles%\Chunghwa Telecom\HiCOS PKI Smart Card\TokenUtility.exe
  • %ProgramFiles%\Chunghwa Telecom\HiCOS PKI Smart Card\UCSBFive.dll
  • %ProgramFiles%\Chunghwa Telecom\HiCOS PKI Smart Card\CHTTokenUtilityzh.dll
  • %ProgramFiles%\Chunghwa Telecom\HiCOS PKI Smart Card\cmsdll.dll
  • <SYSTEM32>\BfiveUcs.dll
  • <SYSTEM32>\chtp15v2.dll
  • <SYSTEM32>\HiCOSCSPv32.dll
  • <SYSTEM32>\HiCOSCSPv32.sig
  • %ProgramFiles%\Chunghwa Telecom\HiCOS PKI Smart Card\HiCOS_Inspector.exe
  • %ProgramFiles%\Chunghwa Telecom\HiCOS PKI Smart Card\HiCOS_InspectorEn.dll
  • %TEMP%\{9D8667EB-E8E7-471C-B97F-D5AADF86E513}\.ba\1033\thm.wxl
  • %TEMP%\{9D8667EB-E8E7-471C-B97F-D5AADF86E513}\.ba\1028\thm.wxl
  • %TEMP%\{28412C54-95EA-48DC-8DCB-D668701C0F5B}\.cr\HiCOS_Client.exe
  • %TEMP%\{9D8667EB-E8E7-471C-B97F-D5AADF86E513}\.ba\wixstdba.dll
  • %TEMP%\{9D8667EB-E8E7-471C-B97F-D5AADF86E513}\.ba\logo.png
  • %TEMP%\{9D8667EB-E8E7-471C-B97F-D5AADF86E513}\.ba\BootstrapperApplicationData.xml
  • %TEMP%\{9D8667EB-E8E7-471C-B97F-D5AADF86E513}\.ba\thm.xml
  • %TEMP%\{9D8667EB-E8E7-471C-B97F-D5AADF86E513}\.ba\thm.wxl
  • %TEMP%\RarSFX0\SetUpRule.xml
  • %TEMP%\RarSFX0\Common.exe
  • %TEMP%\RarSFX0\HiCOS_Client.exe
  • %TEMP%\RarSFX0\GssSetup.exe
  • %TEMP%\RarSFX1\set_sl.bat
  • %TEMP%\RarSFX1\HiCOSPKCS11.dll
  • %TEMP%\RarSFX0\SetUpRule.xml_121220170659251509246
  • %TEMP%\RarSFX0\GSSSetup.log
  • C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP16\snapshot\_REGISTRY_MACHINE_SOFTWARE
  • C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP16\snapshot\_REGISTRY_MACHINE_SYSTEM
  • C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP16\snapshot\_REGISTRY_USER_.DEFAULT
  • C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP16\snapshot\_REGISTRY_MACHINE_SECURITY
  • C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP16\snapshot\domain.txt
  • C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP16\snapshot\Repository\$WinMgmt.CFG
  • C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP16\snapshot\_REGISTRY_MACHINE_SAM
  • C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP16\snapshot\ComDb.Dat
  • C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP16\snapshot\_REGISTRY_USER_NTUSER_S-1-5-19
  • C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP16\snapshot\_REGISTRY_USER_USRCLASS_S-1-5-19
  • %TEMP%\{9D8667EB-E8E7-471C-B97F-D5AADF86E513}\.be\HiCOS_Client.exe
  • C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP16\snapshot\_REGISTRY_USER_NTUSER_S-1-5-18
  • C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP16\snapshot\_REGISTRY_USER_NTUSER_S-1-5-21-2052111302-484763869-725345543-1003
  • C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP16\snapshot\_REGISTRY_USER_USRCLASS_S-1-5-21-2052111302-484763869-725345543-1003
  • C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP16\snapshot\_REGISTRY_USER_NTUSER_S-1-5-20
  • C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP16\snapshot\_REGISTRY_USER_USRCLASS_S-1-5-20
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\node_modules\async\is-UGFTU.tmp
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\node_modules\async\is-M85HT.tmp
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\node_modules\async\is-VNIKE.tmp
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\node_modules\async\is-F7MUQ.tmp
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\node_modules\async\is-LE32A.tmp
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\node_modules\async\is-IE4AP.tmp
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\node_modules\async\is-QPLET.tmp
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\node_modules\async\is-7PVU9.tmp
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\lib\winston\transports\is-442TL.tmp
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\lib\winston\transports\is-8M5QH.tmp
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\lib\winston\config\is-SSIB9.tmp
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\lib\winston\transports\is-DGBB5.tmp
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\lib\winston\transports\is-U4H0L.tmp
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\lib\winston\transports\is-NBUCD.tmp
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\lib\winston\transports\is-I5TC4.tmp
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\lib\winston\transports\is-T88AB.tmp
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\node_modules\colors\lib\is-DUT5E.tmp
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\node_modules\colors\lib\is-VT33A.tmp
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\node_modules\colors\examples\is-RFD34.tmp
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\node_modules\colors\lib\is-U9TKA.tmp
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\node_modules\colors\lib\custom\is-P29LK.tmp
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\node_modules\colors\lib\maps\is-35QN8.tmp
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\node_modules\colors\lib\is-0EI1U.tmp
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\node_modules\colors\lib\custom\is-JRR9B.tmp
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\node_modules\colors\is-KCMEH.tmp
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\node_modules\colors\is-S3EQQ.tmp
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\node_modules\async\lib\is-9KAQC.tmp
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\node_modules\async\support\is-LUK2H.tmp
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\node_modules\colors\is-RD4NA.tmp
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\node_modules\colors\examples\is-EP29O.tmp
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\node_modules\colors\is-GVF9H.tmp
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\node_modules\colors\is-CNQ99.tmp
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\is-U482N.tmp
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\is-TSVHR.tmp
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\is-VOH0P.tmp
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\is-VO24I.tmp
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\examples\is-VK9JF.tmp
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\examples\is-FNI8J.tmp
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\docs\is-Q3TML.tmp
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\examples\is-G08CT.tmp
  • %TEMP%\is-V8KO4.tmp\HiPKILocalSignServer.tmp
  • %TEMP%\is-LQVKN.tmp\_isetup\_shfoldr.dll
  • %ALLUSERSPROFILE%\Start Menu\Programs\HiCOS PKI Smart Card\HiCOS Client Inspector.lnk
  • %WINDIR%\Installer\49f2e.msi
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\is-V2P32.tmp
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\is-D6S0F.tmp
  • %ProgramFiles%\HiPKILocalSignServer\is-B2CN3.tmp
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\is-3KS97.tmp
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\lib\winston\is-ATINN.tmp
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\lib\winston\is-T606O.tmp
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\lib\winston\is-RFHOV.tmp
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\lib\winston\is-MFO9I.tmp
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\lib\winston\config\is-QF4S9.tmp
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\lib\winston\config\is-MM00I.tmp
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\lib\winston\is-AGPR5.tmp
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\lib\winston\is-QRHFF.tmp
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\examples\is-LPCM2.tmp
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\examples\is-PFN8G.tmp
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\examples\is-4VINF.tmp
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\examples\is-LB6S1.tmp
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\examples\is-VLUV7.tmp
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\lib\is-4UAPA.tmp
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\examples\is-L4NM0.tmp
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\examples\is-U1RFL.tmp
Удаляет следующие файлы:
  • %TEMP%\{9D8667EB-E8E7-471C-B97F-D5AADF86E513}\.ba\1033\thm.wxl
  • %TEMP%\{9D8667EB-E8E7-471C-B97F-D5AADF86E513}\.ba\BootstrapperApplicationData.xml
  • %ALLUSERSPROFILE%\Application Data\Package Cache\FD69B5AA60C43B950B3F55F312430CEEE1AE816A\HiPKILocalSignServer.exe
  • %TEMP%\{9D8667EB-E8E7-471C-B97F-D5AADF86E513}\.ba\1028\thm.wxl
  • %TEMP%\{9D8667EB-E8E7-471C-B97F-D5AADF86E513}\.ba\logo.png
  • %TEMP%\{9D8667EB-E8E7-471C-B97F-D5AADF86E513}\.ba\wixstdba.dll
  • %TEMP%\{9D8667EB-E8E7-471C-B97F-D5AADF86E513}\.be\HiCOS_Client.exe
  • %TEMP%\{9D8667EB-E8E7-471C-B97F-D5AADF86E513}\.ba\thm.wxl
  • %TEMP%\{9D8667EB-E8E7-471C-B97F-D5AADF86E513}\.ba\thm.xml
  • %ALLUSERSPROFILE%\Application Data\Package Cache\{C9BD427F-EF5C-4361-BEA1-201709083022}v3.0.2.2\HiCOS_Client_x86.msi
  • %WINDIR%\Installer\MSI1.tmp
  • C:\Config.Msi\49f2d.rbs
  • %TEMP%\RarSFX0\SetUpRule.xml_121220170659251509246
  • %TEMP%\RarSFX0\Common.exe
  • %WINDIR%\Installer\49f2a.msi
  • %TEMP%\is-LQVKN.tmp\_isetup\_shfoldr.dll
  • %TEMP%\is-V8KO4.tmp\HiPKILocalSignServer.tmp
  • %WINDIR%\Installer\49f2c.ipi
  • %TEMP%\RarSFX1\set_sl.bat
Перемещает следующие файлы:
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\test\is-7NH7D.tmp в %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\test\logger-test.js
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\test\is-510FR.tmp в %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\test\logger-levels-test.js
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\test\is-RIC6F.tmp в %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\test\winston-test.js
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\test\fixtures\scripts\is-LL6EG.tmp в %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\test\fixtures\scripts\exit-on-error.js
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\test\fixtures\scripts\is-LGEVK.tmp в %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\test\fixtures\scripts\default-exceptions.js
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\test\is-93UCP.tmp в %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\test\log-rewriter-test.js
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\test\is-PVBFG.tmp в %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\test\helpers.js
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\test\is-DFF7I.tmp в %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\test\exception-test.js
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\test\is-OOI6F.tmp в %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\test\humanReadableUnhandledException-test.js
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\test\is-ORKUD.tmp в %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\test\log-filter-test.js
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\test\is-GUR5J.tmp в %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\test\log-exception-test.js
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\test\fixtures\scripts\is-JOU34.tmp в %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\test\fixtures\scripts\log-exceptions.js
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\test\transports\is-LI5JH.tmp в %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\test\transports\file-maxsize-test.js
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\test\transports\is-MNDTC.tmp в %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\test\transports\file-maxfiles-test.js
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\test\transports\is-D4ODI.tmp в %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\test\transports\file-open-test.js
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\test\transports\is-3B45O.tmp в %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\test\transports\file-tailrolling-test.js
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\test\transports\is-HLC82.tmp в %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\test\transports\file-stress-test.js
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\test\transports\is-4GT66.tmp в %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\test\transports\file-archive-test.js
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\test\fixtures\scripts\is-S531U.tmp в %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\test\fixtures\scripts\unhandle-exceptions.js
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\test\fixtures\scripts\is-DQ7TI.tmp в %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\test\fixtures\scripts\log-string-exception.js
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\test\stress\is-EP4P6.tmp в %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\test\stress\http-server.js
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\test\transports\is-JEGND.tmp в %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\test\transports\daily-rotate-file-test.js
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\test\transports\is-HRNJM.tmp в %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\test\transports\console-test.js
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\node_modules\pkginfo\examples\is-FGTD6.tmp в %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\node_modules\pkginfo\examples\single-property.js
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\node_modules\pkginfo\examples\is-6UBH5.tmp в %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\node_modules\pkginfo\examples\package.json
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\node_modules\pkginfo\examples\is-1PPVI.tmp в %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\node_modules\pkginfo\examples\target-dir.js
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\node_modules\pkginfo\lib\is-R22V8.tmp в %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\node_modules\pkginfo\lib\pkginfo.js
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\node_modules\pkginfo\examples\subdir\is-FH0QQ.tmp в %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\node_modules\pkginfo\examples\subdir\package.json
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\node_modules\pkginfo\examples\is-QF7OJ.tmp в %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\node_modules\pkginfo\examples\object-argument.js
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\node_modules\pkginfo\docs\is-0O63U.tmp в %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\node_modules\pkginfo\docs\pkginfo.html
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\node_modules\pkginfo\docs\is-AVMK6.tmp в %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\node_modules\pkginfo\docs\docco.css
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\node_modules\pkginfo\examples\is-POBMU.tmp в %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\node_modules\pkginfo\examples\all-properties.js
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\node_modules\pkginfo\examples\is-JU2Q4.tmp в %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\node_modules\pkginfo\examples\multiple-properties.js
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\node_modules\pkginfo\examples\is-K28B3.tmp в %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\node_modules\pkginfo\examples\array-argument.js
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\node_modules\pkginfo\test\is-NCL2N.tmp в %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\node_modules\pkginfo\test\pkginfo-test.js
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\test\is-OC375.tmp в %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\test\container-test.js
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\test\is-VBTA5.tmp в %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\test\cli-test.js
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\test\is-HJNIG.tmp в %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\test\custom-formatter-test.js
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\test\is-FE1AE.tmp в %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\test\custom-timestamp-test.js
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\test\is-HTNEE.tmp в %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\test\custom-pretty-print-test.js
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\node_modules\stack-trace\lib\is-S56V0.tmp в %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\node_modules\stack-trace\lib\stack-trace.js
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\node_modules\stack-trace\is-EDC3C.tmp в %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\node_modules\stack-trace\License
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\node_modules\stack-trace\is-R0SM9.tmp в %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\node_modules\stack-trace\.npmignore
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\node_modules\stack-trace\is-U3FT0.tmp в %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\node_modules\stack-trace\Makefile
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\node_modules\stack-trace\is-NN5K0.tmp в %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\node_modules\stack-trace\Readme.md
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\node_modules\stack-trace\is-98SMF.tmp в %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\node_modules\stack-trace\package.json
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\test\transports\is-56BOC.tmp в %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\test\transports\file-test.js
  • %ProgramFiles%\HiPKILocalSignServer\is-4VJI0.tmp в %ProgramFiles%\HiPKILocalSignServer\ChtPopupForm.htm
  • %ProgramFiles%\HiPKILocalSignServer\is-75TC4.tmp в %ProgramFiles%\HiPKILocalSignServer\popupForm.htm
  • %ProgramFiles%\HiPKILocalSignServer\is-DDPDO.tmp в %ProgramFiles%\HiPKILocalSignServer\selfTest.htm
  • %ProgramFiles%\HiPKILocalSignServer\is-IDNDG.tmp в %ProgramFiles%\HiPKILocalSignServer\update.bat
  • %ProgramFiles%\HiPKILocalSignServer\is-HVHFL.tmp в %ProgramFiles%\HiPKILocalSignServer\HiPKIUpdate.exe
  • %ProgramFiles%\HiPKILocalSignServer\is-K18SP.tmp в %ProgramFiles%\HiPKILocalSignServer\addDomain.htm
  • %ProgramFiles%\HiPKILocalSignServer\is-HDB90.tmp в %ProgramFiles%\HiPKILocalSignServer\invisible.vbs
  • %ProgramFiles%\HiPKILocalSignServer\is-I0TOQ.tmp в %ProgramFiles%\HiPKILocalSignServer\chtnode.exe
  • %ProgramFiles%\HiPKILocalSignServer\is-VRCM4.tmp в %ProgramFiles%\HiPKILocalSignServer\version.vbs
  • %ProgramFiles%\HiPKILocalSignServer\is-TH2HP.tmp в %ProgramFiles%\HiPKILocalSignServer\hipkilog.js
  • %ProgramFiles%\HiPKILocalSignServer\is-TLH51.tmp в %ProgramFiles%\HiPKILocalSignServer\hipkiFuncs.js
  • %ProgramFiles%\HiPKILocalSignServer\is-AS17V.tmp в %ProgramFiles%\HiPKILocalSignServer\Module_HiPKILocalSignServer.txt
  • %ProgramFiles%\HiPKILocalSignServer\is-COEDN.tmp в %ProgramFiles%\HiPKILocalSignServer\HiPKIWriteCert.exe
  • %ProgramFiles%\HiPKILocalSignServer\is-NDH5F.tmp в %ProgramFiles%\HiPKILocalSignServer\ICCDFC_Crsbr.exe
  • %ProgramFiles%\HiPKILocalSignServer\is-A4N99.tmp в %ProgramFiles%\HiPKILocalSignServer\HiPKICSR.exe
  • %ProgramFiles%\HiPKILocalSignServer\is-K2QFH.tmp в %ProgramFiles%\HiPKILocalSignServer\ReleaseNote.txt
  • %ProgramFiles%\HiPKILocalSignServer\is-78SE9.tmp в %ProgramFiles%\HiPKILocalSignServer\CheckServer.exe
  • %ProgramFiles%\HiPKILocalSignServer\is-2EI9L.tmp в %ProgramFiles%\HiPKILocalSignServer\ICCDFCDLL.dll
  • %ProgramFiles%\HiPKILocalSignServer\is-DJ52C.tmp в %ProgramFiles%\HiPKILocalSignServer\whiteList.txt
  • %ProgramFiles%\HiPKILocalSignServer\is-PLN6G.tmp в %ProgramFiles%\HiPKILocalSignServer\Module_CardManagement.txt
  • %ProgramFiles%\HiPKILocalSignServer\is-Q2IU1.tmp в %ProgramFiles%\HiPKILocalSignServer\npHttpComponent.dll
  • %ProgramFiles%\HiPKILocalSignServer\is-D86PO.tmp в %ProgramFiles%\HiPKILocalSignServer\CHT.ico
  • %ProgramFiles%\HiPKILocalSignServer\is-1LAPK.tmp в %ProgramFiles%\HiPKILocalSignServer\HiCOSPKCS11.dll
  • %ProgramFiles%\HiPKILocalSignServer\CardManagement\is-M4LS4.tmp в %ProgramFiles%\HiPKILocalSignServer\CardManagement\xOUC.exe
  • %ProgramFiles%\HiPKILocalSignServer\CardManagement\is-LLFI3.tmp в %ProgramFiles%\HiPKILocalSignServer\CardManagement\whiteListCM.txt
  • %ProgramFiles%\HiPKILocalSignServer\digits\is-6FHTI.tmp в %ProgramFiles%\HiPKILocalSignServer\digits\0.png
  • %ProgramFiles%\HiPKILocalSignServer\digits\is-KCPFI.tmp в %ProgramFiles%\HiPKILocalSignServer\digits\2.png
  • %ProgramFiles%\HiPKILocalSignServer\digits\is-TNKH1.tmp в %ProgramFiles%\HiPKILocalSignServer\digits\1.png
  • %ProgramFiles%\HiPKILocalSignServer\CardManagement\is-MEK7N.tmp в %ProgramFiles%\HiPKILocalSignServer\CardManagement\popupFormCM.htm
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\test\transports\is-FOS7A.tmp в %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\test\transports\memory-test.js
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\test\transports\is-FT9CQ.tmp в %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\test\transports\http-test.js
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\test\transports\is-PBRH2.tmp в %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\test\transports\transport.js
  • %ProgramFiles%\HiPKILocalSignServer\CardManagement\is-TA6LT.tmp в %ProgramFiles%\HiPKILocalSignServer\CardManagement\CMCPopForm.htm
  • %ProgramFiles%\HiPKILocalSignServer\CardManagement\is-N55S0.tmp в %ProgramFiles%\HiPKILocalSignServer\CardManagement\CardManagement.js
  • %ProgramFiles%\HiPKILocalSignServer\digits\is-QRHQH.tmp в %ProgramFiles%\HiPKILocalSignServer\digits\3.png
  • %ProgramFiles%\HiPKILocalSignServer\is-JGUD4.tmp в %ProgramFiles%\HiPKILocalSignServer\HiPKISign.exe
  • %ProgramFiles%\HiPKILocalSignServer\is-MBBUS.tmp в %ProgramFiles%\HiPKILocalSignServer\errorcode.js
  • %ProgramFiles%\HiPKILocalSignServer\is-MO17G.tmp в %ProgramFiles%\HiPKILocalSignServer\HiPKIDecrypt.exe
  • %ProgramFiles%\HiPKILocalSignServer\is-N9127.tmp в %ProgramFiles%\HiPKILocalSignServer\hipkiLocalServer.js
  • %ProgramFiles%\HiPKILocalSignServer\is-BEOBO.tmp в %ProgramFiles%\HiPKILocalSignServer\ListInfo.exe
  • %ProgramFiles%\HiPKILocalSignServer\digits\is-M10H9.tmp в %ProgramFiles%\HiPKILocalSignServer\digits\9.png
  • %ProgramFiles%\HiPKILocalSignServer\digits\is-DCKEV.tmp в %ProgramFiles%\HiPKILocalSignServer\digits\5.png
  • %ProgramFiles%\HiPKILocalSignServer\digits\is-QOHCI.tmp в %ProgramFiles%\HiPKILocalSignServer\digits\4.png
  • %ProgramFiles%\HiPKILocalSignServer\digits\is-RH648.tmp в %ProgramFiles%\HiPKILocalSignServer\digits\6.png
  • %ProgramFiles%\HiPKILocalSignServer\digits\is-BHLVK.tmp в %ProgramFiles%\HiPKILocalSignServer\digits\8.png
  • %ProgramFiles%\HiPKILocalSignServer\digits\is-MPHSU.tmp в %ProgramFiles%\HiPKILocalSignServer\digits\7.png
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\node_modules\pkginfo\is-HDK5M.tmp в %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\node_modules\pkginfo\README.md
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\lib\winston\is-QRHFF.tmp в %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\lib\winston\transports.js
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\lib\winston\is-AGPR5.tmp в %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\lib\winston\logger.js
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\lib\winston\config\is-QF4S9.tmp в %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\lib\winston\config\cli-config.js
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\lib\winston\config\is-SSIB9.tmp в %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\lib\winston\config\syslog-config.js
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\lib\winston\config\is-MM00I.tmp в %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\lib\winston\config\npm-config.js
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\lib\winston\is-T606O.tmp в %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\lib\winston\exception.js
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\lib\is-4UAPA.tmp в %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\lib\winston.js
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\examples\is-VLUV7.tmp в %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\examples\webhook-post.js
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\lib\winston\is-RFHOV.tmp в %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\lib\winston\common.js
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\lib\winston\is-ATINN.tmp в %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\lib\winston\container.js
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\lib\winston\is-MFO9I.tmp в %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\lib\winston\config.js
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\lib\winston\transports\is-DGBB5.tmp в %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\lib\winston\transports\console.js
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\node_modules\async\is-F7MUQ.tmp в %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\node_modules\async\.travis.yml
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\node_modules\async\is-VNIKE.tmp в %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\node_modules\async\.jshintrc
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\node_modules\async\is-UGFTU.tmp в %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\node_modules\async\bower.json
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\node_modules\async\is-QPLET.tmp в %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\node_modules\async\component.json
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\node_modules\async\is-M85HT.tmp в %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\node_modules\async\CHANGELOG.md
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\lib\winston\transports\is-NBUCD.tmp в %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\lib\winston\transports\webhook.js
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\lib\winston\transports\is-8M5QH.tmp в %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\lib\winston\transports\file.js
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\lib\winston\transports\is-442TL.tmp в %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\lib\winston\transports\daily-rotate-file.js
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\lib\winston\transports\is-I5TC4.tmp в %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\lib\winston\transports\http.js
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\lib\winston\transports\is-U4H0L.tmp в %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\lib\winston\transports\transport.js
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\lib\winston\transports\is-T88AB.tmp в %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\lib\winston\transports\memory.js
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\is-V2P32.tmp в %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\.npmignore
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\is-3KS97.tmp в %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\.jshintrc
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\is-D6S0F.tmp в %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\.travis.yml
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\is-VO24I.tmp в %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\LICENSE
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\is-VOH0P.tmp в %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\CHANGELOG.md
  • %ProgramFiles%\HiPKILocalSignServer\is-B2CN3.tmp в %ProgramFiles%\HiPKILocalSignServer\unins000.exe
  • %ALLUSERSPROFILE%\Application Data\Package Cache\.unverified\HiCOS_Client_x86.msi в %ALLUSERSPROFILE%\Application Data\Package Cache\{C9BD427F-EF5C-4361-BEA1-201709083022}v3.0.2.2\HiCOS_Client_x86.msi
  • %TEMP%\{9D8667EB-E8E7-471C-B97F-D5AADF86E513}\HiCOS_Client_x86.msi в %ALLUSERSPROFILE%\Application Data\Package Cache\.unverified\HiCOS_Client_x86.msi
  • %TEMP%\{9D8667EB-E8E7-471C-B97F-D5AADF86E513}\HiPKILocalSignServer.exe в %ALLUSERSPROFILE%\Application Data\Package Cache\.unverified\HiPKILocalSignServer.exe
  • %TEMP%\RarSFX1\HiCOSPKCS11.dll в %WINDIR%\HiCOSPKCS11.dll
  • %ALLUSERSPROFILE%\Application Data\Package Cache\.unverified\HiPKILocalSignServer.exe в %ALLUSERSPROFILE%\Application Data\Package Cache\FD69B5AA60C43B950B3F55F312430CEEE1AE816A\HiPKILocalSignServer.exe
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\is-U482N.tmp в %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\package.json
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\examples\is-LPCM2.tmp в %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\examples\exception.js
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\examples\is-LB6S1.tmp в %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\examples\custom-pretty-print.js
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\examples\is-PFN8G.tmp в %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\examples\raw-mode.js
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\examples\is-U1RFL.tmp в %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\examples\silly-levels.js
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\examples\is-L4NM0.tmp в %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\examples\regular-expressions.js
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\examples\is-4VINF.tmp в %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\examples\custom-levels.js
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\docs\is-Q3TML.tmp в %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\docs\transports.md
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\is-TSVHR.tmp в %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\README.md
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\examples\is-G08CT.tmp в %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\examples\color-message.js
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\examples\is-FNI8J.tmp в %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\examples\create-file.js
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\examples\is-VK9JF.tmp в %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\examples\couchdb.js
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\node_modules\async\is-7PVU9.tmp в %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\node_modules\async\LICENSE
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\node_modules\eyes\is-ISH46.tmp в %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\node_modules\eyes\Makefile
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\node_modules\eyes\is-NNCAU.tmp в %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\node_modules\eyes\LICENSE
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\node_modules\eyes\is-5IB0L.tmp в %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\node_modules\eyes\package.json
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\node_modules\eyes\lib\is-NBULV.tmp в %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\node_modules\eyes\lib\eyes.js
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\node_modules\eyes\is-THU65.tmp в %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\node_modules\eyes\README.md
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\node_modules\cycle\is-SFNU5.tmp в %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\node_modules\cycle\README.md
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\node_modules\colors\tests\is-D3FJ7.tmp в %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\node_modules\colors\tests\safe-test.js
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\node_modules\colors\tests\is-2H8SF.tmp в %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\node_modules\colors\tests\basic-test.js
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\node_modules\colors\themes\is-SO21A.tmp в %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\node_modules\colors\themes\generic-logging.js
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\node_modules\cycle\is-E1BQ1.tmp в %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\node_modules\cycle\package.json
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\node_modules\cycle\is-22QL2.tmp в %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\node_modules\cycle\cycle.js
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\node_modules\eyes\test\is-QMCA8.tmp в %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\node_modules\eyes\test\eyes-test.js
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\node_modules\isstream\is-HAKQ9.tmp в %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\node_modules\isstream\test.js
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\node_modules\isstream\is-84935.tmp в %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\node_modules\isstream\README.md
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\node_modules\pkginfo\is-SQ101.tmp в %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\node_modules\pkginfo\.npmignore
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\node_modules\pkginfo\is-G2KOR.tmp в %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\node_modules\pkginfo\package.json
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\node_modules\pkginfo\is-HETO4.tmp в %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\node_modules\pkginfo\LICENSE
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\node_modules\isstream\is-JG74D.tmp в %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\node_modules\isstream\package.json
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\node_modules\isstream\is-9EBC0.tmp в %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\node_modules\isstream\.npmignore
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\node_modules\isstream\is-R1GA0.tmp в %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\node_modules\isstream\.jshintrc
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\node_modules\isstream\is-F3U64.tmp в %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\node_modules\isstream\.travis.yml
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\node_modules\isstream\is-T6BJT.tmp в %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\node_modules\isstream\LICENSE.md
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\node_modules\isstream\is-VITQ1.tmp в %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\node_modules\isstream\isstream.js
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\node_modules\colors\is-CNQ99.tmp в %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\node_modules\colors\ReadMe.md
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\node_modules\colors\is-GVF9H.tmp в %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\node_modules\colors\package.json
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\node_modules\colors\is-RD4NA.tmp в %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\node_modules\colors\safe.js
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\node_modules\colors\examples\is-RFD34.tmp в %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\node_modules\colors\examples\safe-string.js
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\node_modules\colors\examples\is-EP29O.tmp в %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\node_modules\colors\examples\normal-usage.js
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\node_modules\colors\is-S3EQQ.tmp в %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\node_modules\colors\MIT-LICENSE.txt
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\node_modules\async\is-IE4AP.tmp в %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\node_modules\async\README.md
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\node_modules\async\is-LE32A.tmp в %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\node_modules\async\package.json
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\node_modules\async\lib\is-9KAQC.tmp в %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\node_modules\async\lib\async.js
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\node_modules\colors\is-KCMEH.tmp в %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\node_modules\colors\.travis.yml
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\node_modules\async\support\is-LUK2H.tmp в %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\node_modules\async\support\sync-package-managers.js
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\node_modules\colors\lib\is-U9TKA.tmp в %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\node_modules\colors\lib\colors.js
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\node_modules\colors\lib\maps\is-68GI4.tmp в %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\node_modules\colors\lib\maps\random.js
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\node_modules\colors\lib\maps\is-NK5KM.tmp в %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\node_modules\colors\lib\maps\rainbow.js
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\node_modules\colors\lib\maps\is-RVKOK.tmp в %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\node_modules\colors\lib\maps\zebra.js
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\node_modules\colors\screenshots\is-F7UU5.tmp в %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\node_modules\colors\screenshots\colors.png
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\node_modules\colors\lib\system\is-S5LPB.tmp в %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\node_modules\colors\lib\system\supports-colors.js
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\node_modules\colors\lib\maps\is-35QN8.tmp в %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\node_modules\colors\lib\maps\america.js
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\node_modules\colors\lib\is-VT33A.tmp в %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\node_modules\colors\lib\index.js
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\node_modules\colors\lib\is-DUT5E.tmp в %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\node_modules\colors\lib\extendStringPrototype.js
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\node_modules\colors\lib\is-0EI1U.tmp в %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\node_modules\colors\lib\styles.js
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\node_modules\colors\lib\custom\is-P29LK.tmp в %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\node_modules\colors\lib\custom\zalgo.js
  • %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\node_modules\colors\lib\custom\is-JRR9B.tmp в %ProgramFiles%\HiPKILocalSignServer\node_modules\winston\node_modules\colors\lib\custom\trap.js
Другое:
Ищет следующие окна:
  • ClassName: '' WindowName: ''
  • ClassName: '' WindowName: 'HiCOS Token Utility (3.0.2 build 55242)'
  • ClassName: 'EDIT' WindowName: ''
Создает и запускает на исполнение:
  • '%ALLUSERSPROFILE%\Application Data\Package Cache\FD69B5AA60C43B950B3F55F312430CEEE1AE816A\HiPKILocalSignServer.exe' /VERYSILENT
  • '%ProgramFiles%\Chunghwa Telecom\HiCOS PKI Smart Card\TokenUtility.exe' -AutoHide
  • '%TEMP%\is-V8KO4.tmp\HiPKILocalSignServer.tmp' /SL5="$200F4,6528134,484864,%ALLUSERSPROFILE%\Application Data\Package Cache\FD69B5AA60C43B950B3F55F312430CEEE1AE816A\HiPKILocalSignServer.exe" /VERYSILENT
  • '%ProgramFiles%\HiPKILocalSignServer\chtnode.exe' hipkiLocalServer.js
  • '%ProgramFiles%\HiPKILocalSignServer\CheckServer.exe' /start
  • '%TEMP%\RarSFX0\Common.exe' /repair /quiet /norestart
  • '%TEMP%\RarSFX0\GssSetup.exe'
  • '%TEMP%\RarSFX0\HiCOS_Client.exe' /repair /quiet /norestart
  • '%TEMP%\{9D8667EB-E8E7-471C-B97F-D5AADF86E513}\.be\HiCOS_Client.exe' -q -burn.elevated BurnPipe.{38D8481B-BA8A-46B2-8EAB-0F5EE5465670} {E597BC63-37BF-4722-A675-6979EA2AEB2E} 2980
  • '%TEMP%\{28412C54-95EA-48DC-8DCB-D668701C0F5B}\.cr\HiCOS_Client.exe' -burn.clean.room="%TEMP%\RarSFX0\HiCOS_Client.exe" -burn.filehandle.attached=348 -burn.filehandle.self=344 /repair /quiet /norestart
Запускает на исполнение:
  • '<SYSTEM32>\msiexec.exe' /V
  • '<SYSTEM32>\scardsvr.exe'
  • '<SYSTEM32>\regsvr32.exe' /s "%ProgramFiles%\HiPKILocalSignServer\npHttpComponent.dll"
  • '<SYSTEM32>\cmd.exe' /c ""%TEMP%\RarSFX1\set_sl.bat" "
  • '<SYSTEM32>\reg.exe' add HKLM\SOFTWARE\Microsoft\SystemCertificates\TrustedPublisher\Certificates\6C46B8823BB9712AB6BB74E6557D7ED1D5B5AF7D /v Blob /t REG_BINARY /d 0300000001000000140000006c46b8823bb9712ab6bb74e655...
  • '<SYSTEM32>\reg.exe' add HKLM\SOFTWARE\Microsoft\Silverlight /v AllowElevatedTrustAppsInBrowser /t REG_DWORD /d 1 /f

Рекомендации по лечению

  1. В случае если операционная система способна загрузиться (в штатном режиме или режиме защиты от сбоев), скачайте лечащую утилиту Dr.Web CureIt! и выполните с ее помощью полную проверку вашего компьютера, а также используемых вами переносных носителей информации.
  2. Если загрузка операционной системы невозможна, измените настройки BIOS вашего компьютера, чтобы обеспечить возможность загрузки ПК с компакт-диска или USB-накопителя. Скачайте образ аварийного диска восстановления системы Dr.Web® LiveDisk или утилиту записи Dr.Web® LiveDisk на USB-накопитель, подготовьте соответствующий носитель. Загрузив компьютер с использованием данного носителя, выполните его полную проверку и лечение обнаруженных угроз.
Демо бесплатно

 

Скачать Dr.Web

По серийному номеру

Выполните полную проверку системы с использованием Антивируса Dr.Web Light для macOS. Данный продукт можно загрузить с официального сайта Apple App Store.

Демо бесплатно

 

Скачать Dr.Web

По серийному номеру

Скачать Dr.Web с Apple Store

На загруженной ОС выполните полную проверку всех дисковых разделов с использованием продукта Антивирус Dr.Web для Linux.

Демо бесплатно

 

Скачать Dr.Web

По серийному номеру

  1. Если мобильное устройство функционирует в штатном режиме, загрузите и установите на него бесплатный антивирусный продукт Dr.Web для Android Light. Выполните полную проверку системы и используйте рекомендации по нейтрализации обнаруженных угроз.
  2. Если мобильное устройство заблокировано троянцем-вымогателем семейства Android.Locker (на экране отображается обвинение в нарушении закона, требование выплаты определенной денежной суммы или иное сообщение, мешающее нормальной работе с устройством), выполните следующие действия:
    • загрузите свой смартфон или планшет в безопасном режиме (в зависимости от версии операционной системы и особенностей конкретного мобильного устройства эта процедура может быть выполнена различными способами; обратитесь за уточнением к инструкции, поставляемой вместе с приобретенным аппаратом, или напрямую к его производителю);
    • после активации безопасного режима установите на зараженное устройство бесплатный антивирусный продукт Dr.Web для Android Light и произведите полную проверку системы, выполнив рекомендации по нейтрализации обнаруженных угроз;
    • выключите устройство и включите его в обычном режиме.

Подробнее о Dr.Web для Android

Демо бесплатно на 14 дней

Выдаётся при установке

Скачать с сайта
Скачать с Google Play